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Amendments to the Claims: 



This listing of claims will replace all prior versions, and listings, of claims in 
the application: 



Listing of Claims: 

1 . (currently amended) A method for authenticating the identity of a user 
by an authority, comprising: 

enrolling a plurality of credentials for the user with the authority; 

establishing at least one shared secret between the user and the 
authority relating to a predefined shared secret manner for presenting each of a 
plurality of current user credentials to the authority for the user for consecutive 
occasions; 

receiving at least one currently presented user credential by the 
authority for authentication of the identity of the user; and 

authenticating an identity of the user by the authority based on a 
correspondence between the enrolled and current user credentials and a 
correspondence between the shared secret manner for presenting the current user 
credential and the manner in which the current user credential is presented to the 
authority; 

wherein receiving the current user credential further comprises 
receiving at least one additional currently presented user credential by the authority; 
and 

wherein receiving the current user credential further comprises 
receiving at least one additional currently presented user credential by the authority in 
one of a plurality of randomly selected predefined shared secret sequences as directed 
by the authority . 
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2. (previously presented) The method of claim 1 , wherein enrolling the 
user credential further comprises receiving the plurality of user credentials by the 
authority for enrollment. 

3. (previously presented) The method of claim 2, wherein receiving the 
plurality of user credentials for enrollment further comprises storing the plurality of 
user credentials by the authority. 

4. (previously presented) The method of claim 3 5 wherein storing the 
plurality of user credentials further comprises storing at least one biometric template 
for the user. 

5. (previously presented) The method of claim 3, wherein storing the 
plurality of user credentials further comprises storing at least one document for the 
user. 

6. (previously presented) The method of claim 3, wherein storing the 
plurality of user credentials further comprises storing the plurality of user credentials 
on one of a host computer, a local terminal, and a smart card for the user. 

7. (previously presented) The method of claim 1 , wherein enrolling the 
plurality of user credentials further comprises enrolling at least one biometric 
template and at least one document for the user. 

8. (original) The method of claim 7, wherein enrolling the biometric 
template further comprises enrolling the biometric template for at least one of a 
fingerprint template, a face template, a voice template, and an iris template for the 
user. 

9. (original) The method of claim 7, wherein enrolling the document 
further comprises enrolling at least one of a digital document and a paper document 
for the user. 
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10. (original) The method of claim 9, wherein enrolling the digital 
document further comprises enrolling at least one of a digital certificate and a digital 
signature for the user. 

1 1 . (original) The method of claim 9, wherein enrolling the paper 
document further comprises enrolling a passport for the user. 

12. (previously presented) The method of claim 1 , wherein enrolling the 
plurality of user credentials with the authority further comprises storing user 
authentication information on a user token for the user. 

13. (original) The method of claim 12, wherein storing the information on 
the user token further comprises storing the user authentication information on a 
smart card for the user. 

14. (original) The method of claim 13, wherein storing the information on 
the smart card further comprises storing biometric information for the user. 

15. (original) The method of claim 14, wherein storing the biometric 
information for the user further comprises storing biometric information for one of a 
fingerprint, a face, a voice, and an iris for the user, 

16. (original) The method of claim 13, wherein storing the information on 
the smart card further comprises storing the shared secret for the user on the smart 
card. 

17. - (original) The method of claim 13, wherein storing the information on 
the smart card further comprises storing the authentication information on the smart 
card signed with a private key for the user. 

18. (canceled) 
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19. (original) The method of claim 1, wherein establishing the predefined 
shared secret manner of presenting the user credential further comprises establishing 
at least one predefined shared secret sequence of presenting the current user credential 
to the authority. 

20. (original) The method of claim 19, wherein establishing the predefined 
shared secret sequence of presenting the current user credential further comprises 
establishing the predefined shared secret sequence which functions in a manner 
analogous to a personal identification number for the user. 

2 1 . (original) The method of claim 1 , wherein establishing the shared 
secret further comprises storing information about the shared secret by the authority. 

22. (previously presented) The method of claim 2 1 , wherein storing the 
information about the shared secret by the authority further comprises storing the 
information about the shared secret and the plurality of user credentials together in a 
database by the authority. 

23. (previously presented) The method of claim 22, wherein storing the 
information about the shared secret and the plurality of user credentials in the 
database further comprises storing the information about the shared secret and the 
plurality of user credentials encrypted and digitally signed. 

24. (original) The method of claim 1, wherein establishing the shared 
secret further comprising establishing at least one additional shared secret between 
the user and the authority. 

25. (original) The method of claim 24, wherein establishing the additional 
shared secret further comprises establishing a predefined shared secret personal 
identification number for the user. 
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26. (original) The method of claim 24, wherein establishing the additional 
shared secret further comprises establishing at least one additional predefined shared 
secret manner of presenting the current user credential to the authority for the user. 

27. (original) The method of claim 24, wherein establishing the additional 
shared secret further comprises establishing a predefined shared secret manner of 
presenting at least one additional current user credential to the authority for the user. 

28. (canceled) 

29. (previously presented) The method of claim 1, wherein establishing the 
predefined shared secret manner of presenting of each of the plurality of current user 
credentials further comprises establishing a variation of the predefined shared secret 
manner of presenting each of the current user credentials to the authority for the user 
corresponding to a variation in a degree of security. 

30. (previously presented) A method for authenticating the identity of a 
user by an authority, comprising: 

enrolling at least one credential for the user with the authority; 

establishing at least one shared secret between the user and the 
authority relating to a predefined shared secret manner for presenting a current user 
credential to the authority; 

receiving at least one currently presented user credential by the 
authority for authentication of the identity of the user; 

authenticating an identity of the user by the authority based on a 
correspondence between the enrolled and current user credentials and a 
correspondence between the shared secret manner for presenting the current user 
credential and the manner in which the current user credential is presented to the 
authority; 
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wherein establishing the shared secret further comprises establishing at 
least one additional shared secret between the user and the authority; 

wherein establishing the additional shared secret further comprises 
establishing a predefined shared secret manner of presenting each of a plurality of 
additional current user credentials to the authority for the user; and 

wherein establishing the predefined shared secret manner of presenting 
each of the plurality of additional current user credentials further comprises 
establishing a variation of the predefined shared secret manner of presenting each of 
the additional current user credentials to the authority for the user for consecutive 
occasions. 

3 1 . (original) The method of claim 1 , wherein receiving the currently 
presented user credential further comprises receiving the current user credential by 
the authority in a predefined shared secret sequence. 

32. (original) The method of claim 1, wherein receiving the currently 
presented user credential further comprises receiving a current biometric sample by 
the authority. 

33. (original) The method of claim 32, wherein receiving the current 
biometric sample by the authority further comprises receiving a current biometric 
sample for one of a fingerprint, a face, a voice, and an iris for the user. 

34. (original) The method of claim 1, wherein receiving the currently 
presented user credential further comprises receiving the current user credential by 
the authority from the user in a shared secret manner directed by the authority. 

35. (original) The method of claim 34, wherein receiving the current user 
credential in the manner directed by the authority further comprises directing the user 
by the authority to present a biometric sample for at least one user fingerprint. 
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36. (original) The method of claim 34, wherein receiving the current user 
credential in the manner directed by the authority further comprises directing the user 
by the authority to present a combination of biometric samples for at least two of a 
user fingerprint, a user face, a user voice, and a user iris in a predefined shared secret 
sequence. 

37. (canceled) 

38. (currently amended) The method of claim £7 I, wherein receiving the 
current user credential further comprises receiving at least one additional currently 
presented user credential by the authority in a manner directed by the authority. 

39. (canceled) 

40. (original) The method of claim 1, wherein authenticating the identity 
of the user by the authority further comprises authenticating the identity of the user by 
one of a host computer and a local device. 

4 1 . (original) The method of claim 40, wherein authenticating the identity 
of the user by the local device further comprises authenticating the identity of the user 
for activation one of a gate controller, a door opener, a telephone, and an appliance. 

42. (original) The method of claim 1, wherein authenticating the identity 
of the user by the authority further comprises authenticating the identity of the user 
based on the enrolled user credential and the shared secret manner for presenting the 
current user credential stored together in one of a local database and a remote 
database of the authority. 

43. (original) The method of claim 1, wherein authenticating the identity 
of the user by the authority further comprises authenticating the identity of the user in 
order for access to one of a device, a physical location, and a network. 
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44. (original) The method of claim 1, wherein authenticating the identity 
of the user by the authority further comprises authenticating the identity of the user to 
a smart card. 

45. (currently amended) Th e m e thod of claim 1 A method for 
authenticating the identity of a user by an authority, comprising: 

enrolling a plurality of credentials for the user with the authority; 

establishing at least one shared secret between the user and the 
authority relating to a predefined shared secret manner for presenting each of a 
plurality of current user credentials to the authority for the user for consecutive 
occasions; 

receiving at least one currently presented user credential by the 
authority for authentication of the identity of the user; 

authenticating an identity of the user by the authority based on a 
correspondence between the enrolled and current user credentials and a 
correspondence between the shared secret manner for presenting the current user 
credential and the manner in which the current user credential is presented to the 
authority; and 

wherein authenticating the identity of the user by the authority further 
comprises authenticating the identity of the user to activate a silent alarm for the user. 

46. (currently amended) A system for authenticating the identity of a user 
by an authority, comprising: 

means for enrolling a plurality of credentials for the user with the 

authority; 
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means for establishing at least one shared secret between the user and 
the authority relating to a predefined shared secret manner for presenting each of a 
plurality of current user credentials to the authority for the user for consecutive 
occasions; 

means for receiving at least one currently presented user credential by 
the authority for authentication of the identity of the user; and 

means for authenticating an identity of the user by the authority based 
on a correspondence between the enrolled and current user credentials and a 
correspondence between the shared secret manner for presenting the current user 
credential and the manner in which the current user credential is presented to the 
authority; 

wherein the means for receiving the current user credential further 
comprises means for receiving at least one additional currently presented user 
credential by the authority; and 

wherein the means for receiving the current user credential further 
comprises means for receiving at least one additional currently presented user 
credential by the authority in one of a plurality of randomly selected predefined 
shared secret sequences as directed by the authority . 

47. (previously presented) The system of claim 46, wherein the means for 
enrolling the user credential further comprises means for receiving the plurality of 
user credentials by the authority for enrollment. 

48. (previously presented) The system of claim 47, wherein the means for 
receiving the plurality of user credentials for enrollment further comprises means for 
storing the plurality of user credentials by the authority. 
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49. (previously presented) The system of claim 48, wherein the means for 
storing the plurality of user credentials further comprises means for storing at least 
one biometric template for the user. 

50. (previously presented) The system of claim 48, wherein the means for 
storing the plurality of user credentials further comprises means for storing at least 
one document for the user. 

5 1 . (previously presented) The system of claim 48, wherein the means for 
storing the plurality of user credentials further comprises means for storing the 
plurality of user credentials on one of a host computer, a local terminal, and a smart 
card for the user. 

52. (previously presented) The system of claim 46, wherein the means for 
enrolling the plurality of user credentials further comprises means for enrolling at 
least one biometric template and at least one document for the user. 

53. (original) The system of claim 52, wherein the means for enrolling the 
biometric template further comprises means for enrolling the biometric template for at 
least one of a fingerprint template, a face template, a voice template, and an iris 
template for the user. 

54. (original) The system of claim 52, wherein the means for enrolling the 
document further comprises means for enrolling at least one of a digital document and 
a paper document for the user. 

55. (original) The system of claim 54, wherein the means for enrolling the 
digital document further comprises means for enrolling at least one of a digital 
certificate and a digital signature for the user. 

56. (original) The system of claim 54, wherein the means for enrolling the 
paper document further comprises means for enrolling a passport for the user. 
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57. (previously presented) The system of claim 46, wherein the means for 
enrolling the plurality of user credentials with the authority further comprises means 
for storing user authentication information on a user token for the user. 

58. (original) The system of claim 57, wherein the means for storing the 
information on the user token further comprises means for storing the user 
authentication information on a smart card for the user. 

59. (original) The system of claim 58, wherein the means for storing the 
information on the smart card further comprises means for storing biometric 
information for the user. 

60. (original) The system of claim 59, wherein the means for storing the 
biometric information for the user further comprises means for storing biometric 
information for one of a fingerprint, a face, a voice, and an iris for the user. 

61 . (original) The system of claim 58, wherein the means for storing the 
information on the smart card further comprises means for storing the shared secret 
for the user on the smart card. 

62. (original) The system of claim 58, wherein the means for storing the 
information on the smart card further comprises means for storing the authentication 
information on the smart card signed with a private key for the user. 

63. (canceled) 

64. (original) The system of claim 46, wherein the means for establishing 
the predefined shared secret manner of presenting the user credential further 
comprises means for establishing at least one predefined shared secret sequence of 
presenting the current user credential to the authority. 

65. (original) The system of claim 64, wherein the means for establishing 
the predefined shared secret sequence of presenting the current user credential further 
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comprises means for establishing the predefined shared secret sequence which 
functions in a manner analogous to a personal identification number for the user. 

66. (original) The system of claim 46, wherein the means for establishing 
the shared secret further comprises means for storing information about the shared 
secret by the authority. 

67. (previously presented) The system of claim 66, wherein the means for 
storing the information about the shared secret by the authority further comprises 
means for storing the information about the shared secret and the plurality of user 
credentials together in a database by the authority. 

68. (previously presented) The system of claim 67, wherein the means for 
storing the information about the shared secret and the plurality of user credentials in 
the database further comprises means for storing the information about the shared 
secret and the plurality of user credentials encrypted and digitally signed. 

69. (original) The system of claim 46, wherein the means for establishing 
the shared secret further comprising establishing at least one additional shared secret 
between the user and the authority. 

70. (original) The system of claim 69, wherein the means for establishing 
the additional shared secret further comprises means for establishing a predefined 
shared secret personal identification number for the user. 

71 . (original) The system of claim 69, wherein the means for establishing 
the additional shared secret further comprises means for establishing at least one 
additional predefined shared secret manner of presenting the current user credential to 
the authority for the user. 

72. (original) The system of claim 69, wherein the means for establishing 
the additional shared secret further comprises means for establishing a predefined 
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shared secret manner of presenting at least one additional current user credential to 
the authority for the user. 

73. (canceled) 

74. (previously presented) The system of claim 46, wherein the means for 
establishing the predefined shared secret manner of presenting of each of the plurality 
of current user credentials further comprises means for establishing a variation of the 
predefined shared secret manner of presenting each of the current user credentials to 
the authority for the user corresponding to a variation in a degree of security. 

75. (previously presented) A system for authenticating the identity of a 
user by an authority, comprising: 

means for enrolling at least one credential for the user with the 

authority; 

means for establishing at least one shared secret between the user and 
the authority relating to a predefined shared secret manner for presenting a current 
user credential to the authority; 

means for receiving at least one currently presented user credential by 
the authority for authentication of the identity of the user; 

means for authenticating an identity of the user by the authority based 
on a correspondence between the enrolled and current user credentials and a 
correspondence between the shared secret manner for presenting the current user 
credential and the manner in which the current user credential is presented to the 
authority; 

wherein the means for establishing the shared secret further comprises 
means for establishing shared secret between the user and the authority; 
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wherein the means for establishing the additional shared secret further 
comprises means for establishing a predefined shared secret manner of presenting 
each of a plurality of additional current user credentials to the authority for the user; 
and 

wherein the means for establishing the predefined shared secret manner 
of presenting each of the plurality of additional current user credentials further 
comprises means for establishing a variation of the predefined shared secret manner 
of presenting each of the additional current user credentials to the authority for the 
user for consecutive occasions. 

76. (original) The system of claim 46, wherein the means for receiving the 
currently presented user credential further comprises means for receiving the current 
user credential by the authority in a predefined shared secret sequence. 

77. (original) The system of claim 46, wherein the means for receiving the 
currently presented user credential further comprises means for receiving a current 
biometric sample by the authority. 

78. (original) The system of claim 77, wherein the means for receiving the 
current biometric sample by the authority further comprises means for receiving a 
current biometric sample for one of a fingerprint, a face, a voice, and an iris for the 
user. 

79. (original) The system of claim 46, wherein the means for receiving the 
currently presented user credential further comprises means for receiving the current 
user credential by the authority from the user in a shared secret manner directed by 
the authority. 

80. (original) The system of claim 79, wherein the means for receiving the 
current user credential in the manner directed by the authority further comprises 
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means for directing the user by the authority to present a biometric sample for at least 
one user fingerprint. 

81 . (original) The system of claim 79, wherein the means for receiving the 
current user credential in the manner directed by the authority further comprises 
means for directing the user by the authority to present a combination of biometric 
samples for at least two of a user fingerprint, a user face, a user voice, and a user iris 
in a predefined shared secret sequence. 

82. (canceled) 

83. (currently amended) The system of claim 82 46, wherein the means for 
receiving the current user credential further comprises means for receiving at least 
one additional currently presented user credential by the authority in a manner 
directed by the authority. 

84. (canceled) 

85. (original) The system of claim 46, wherein the means for 
authenticating the identity of the user by the authority further comprises means for 
authenticating the identity of the user by one of a host computer and a local device. 

86. (original) The system of claim 85, wherein the means for 
authenticating the identity of the user by the local device further comprises means for 
authenticating the identity of the user for activation one of a gate controller, a door 
opener, a telephone, and an appliance. 

87. (original) The system of claim 46, wherein the means for 
authenticating the identity of the user by the authority further comprises means for 
authenticating the identity of the user based on the enrolled user credential and the 
shared secret manner for presenting the current user credential stored together in one 
of a local database and a remote database of the authority. 
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88. (original) The system of claim 46, wherein the means for 
authenticating the identity of the user by the authority further comprises means for 
authenticating the identity of the user in order for access to one of a device, a physical 
location, and a network. 

89. (original) The system of claim 46, wherein the means for 
authenticating the identity of the user by the authority further comprises means for 
authenticating the identity of the user to a smart card. 

90. (currently amended) Tho systom of claim 16. A system for 
authenticating the identity of a user by an authority, comprising: 

means for enrolling a plurality of credentials for the user with the 

authority; 

means for establishing at least one shared secret between the user and 
the authority relating to a predefined shared secret manner for presenting each of a 
plurality of current user credentials to the authority for the user for consecutive 
occasions; 

means for receiving at least one currently presented user credential by 
the authority for authentication of the identity of the user; 

means for authenticating an identity of the user by the authority based 
on a correspondence between the enrolled and current user credentials and a 
correspondence between the shared secret manner for presenting the current user 
credential and the manner in which the current user credential is presented to the 
authority; and 

wherein the means for authenticating the identity of the user by the 
authority further comprises means for authenticating the identity of the user to 
activate a silent alarm for the user. 
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(canceled) 
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